arXiv:1501.06419v2 [cs.IT] 20 Aug 2015 


Critical pairs for the Product Singleton Bound 

Diego Mirandola* and Gilles Zemor'*' 

August 21, 2015 


Abstract 

We characterize Product-MDS pairs of linear codes, i.e. pairs of codes C, D whose 
product under coordinatewise multiplication has maximum possible minimum distance as 
a function of the code length and the dimensions dimC, dim_D. We prove in particular, 
for C = D, that if the square of the code C has minimum distance at least 2, and 
(C, C) is a Product-MDS pair, then either C is a generalized Reed-Solomon code, or C 
is a direct sum of self-dual codes. In passing we establish coding-theory analogues of 
classical theorems of additive combinatorics. 
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1 Introduction 

Let F be a finite field. Given vectors x = (xi,..., Xn), y = (yi,..., yn) of F^, let us denote 
by xy the componentwise product of x and y, 

xy = {xiyi,.. .,Xnyn)- 

Given two linear codes C,D C F”, let us denote hy CD the F-linear subspace of F” generated 
by all products xy, x € C, y & D. This product, sometimes called the Schur product, has 
usually been denoted hy C * D, but we wish to lighten notation. Likewise we shall denote 
the Schur square (henceforth square) of a code C by context should prevent confusion 
with cartesian products. 

Products of codes turn up in a variety of situations, such as algebraic error correction, 
secret sharing and multiparty computation, algebraic complexity theory, lattice construc¬ 
tions, and lately cryptanalysis. For an exhaustive discussion on the connection between 
code products and these different topics, the reader is referred to [1]. A number of efforts 
have gone into describing the code-theoretic structure of code products, see 0 Chapter 12] 
and m for an extensive review of the current state of the art. In particular, m collects 
several technical results which will be cited explicitly in Section [2] and used later in this 
paper. Among these, the following bound on the minimum distance of products, which was 
first proved in m , appears. 

Theorem 1.1 (Product Singleton Bound [l3]). Let C,D C be linear codes. Then 

dmin(C'F) < max{l,n — (dimC -|- dimF) -|- 2}. (1) 
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A slightly stronger version of Theoreni ll.il is actually proved in [13] . as is a version involv¬ 
ing the product of more than two codes, but the above statement is really what motivates 
our discussion. We shall call the upper bound (pP) the Product Singleton Bound, that can be 
thought of as a generalization of the classical Singleton Bound. Indeed, the classical Single- 
ton Bound for a single code C is recovered by taking the code D in Theorem 11.11 to be of 
dimension 1 and minimum distance n. 

Our goal in this paper is to characterize pairs (C, D) of codes that achieve equality in (fTj). 
We make the remark that if d^i^(CD) is allowed to be equal to 1, then pairs achieving 
equality in ([T]) can be almost anything, since typical pairs of codes will have a product equal 
to the whole space F'^. For a study of this phenomenon see mm- So we shall disregard 
the situation when dmm{CD) = 1 and call {C,D) a Product-MDS (PMDS) pair if it achieves 
equality in (pp and dmin{CD) > 2. 

As mentioned above, a PMDS pair can consist of an ordinary MDS code and a code of 
dimension 1. It is a natural question to ask what other PMDS pairs exist. It turns out that 
there is a surprisingly complete answer to this question. We shah show in particular that if 
{C,D) is a PMDS pair such that dim(7 > 2, dimD > 2, and dmin{CD) > 3, then C and D 
can only be Reed-Solomon codes. By this we mean Reed-Solomon code in the widest sense, 
i.e. generalized, possibly extended or doubly extended in the terminology of mi, or Cauchy 
codes as in [7]. PMDS pairs with dmin{CD) = 2 will also be described quite precisely. To be 
more specihc, in the symmetric case C = D we shall prove: 

Theorem 1.2. If {C,C) is a PMDS pair, then C is either a Reed-Solomon code or a direct 
sum of self-dual codes. 

Self-duality in the above statement should be understood to be relative to a non-degenerate 
bilinear form which is not necessarily the standard inner product. 

To establish these results we shall import methods from additive combinatorics and 
establish coding-theoretic analogues of the classical theorems of Kneser [10] and Vosper m- 
For background on and proofs of Kneser and Vosper’s Theorems we refer to m- Kneser’s 
Theorem implies in particular that if A, B are subsets of an abelian group such that 

\A + B\< |A| + |B|-1 

then A-\- B must be periodic, i.e. there exists a non-zero element g of the abelian group that 
stabilizes A-\-B so that we have A-\-B-\-g = A-\-B. Our coding-theoretic variant of Kneser’s 
Theorem will imply that if C and D are two codes such that 

dim CD < dim C -|- dim D — 1, 

then the code C is necessarily the direct sum of two non-zero codes, which is equivalent to 
the existence of a non-constant vector x of such that xCD = CD. 

Vosper’s Theorem is a characterization of pairs of subsets A, B of the integers modulo 
a prime p with the property that |A -|- i?| = |A| -|- \B\ — 1. It states that, excluding some 
degenerate cases. A, B must be arithmetic progressions with the same difference. We make 
the remark that if a code C has a generator matrix with rows g,ga,... ,ga^~^, i.e. has 
a basis of elements in “geometric” progression then, provided g is of weight n and a has 
distinct coordinates, C must be a Reed-Solomon code. This is why a code-theoretic version 
of Vosper’s Theorem forces the appearance of Reed-Solomon codes. There will be some 
twists to the analogy however that we shall discuss later in the paper. 

The paper is organized as follows. Section [5] sets up notation and preliminary results 
and states our primary contribution. Theorem 12.121 Section [3] states and proves the coding- 
theory equivalent of Kneser’s Theorem. Section 0] is dedicated to a coding-theory version of 
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Vosper’s Theorem. Section [S] shows how to recover a version of Randriambololona’s Product 
Singleton Bound as a straightforward consequence of Kneser’s Theorem and goes on to derive 
the proof of Theorem 12.121 Section [U] concludes with some comments. 

2 Preliminaries and statement of the main Theorem 

Throughout the paper F will denote a finite field. We shall need, in a couple of occasions, 
to deal with helds that may be infinite in which case we will use the notation K. 

Given a vector x G R”, we denote by suppx its support and by wt(x) its weight. The 
support of a subvector space of iP” is defined as the union of the supports of all its vectors, 
and we shall say that a vector space in RT” has full support if its support is {1,..., n}. 

In this paper all codes will be linear. We will call them simply “codes” when the ambient 
space is T”, and use the terminology of vector spaces in the general setting of 

2.1 MDS Codes 

Given a code C C T”, we denote by C-*- its dual with respect to the standard inner product 
in T” and by dmin(C') its minimum distance. 

The classical Singleton Bound states 

dim C + dmin(C') < n + 1. 

A code which attains this bound is said to be Maximum Distance Separable (MDS). We 
recall the following well-known properties and characterizations of MDS codes HU. 

Lemma 2.1. Given a code C C T”, the following statements are equivalent: 

1. C is MDS, 

2. is MDS, 

3. any dim C columns of a generator matrix of C are linearly independent, 

4 . for any coordinate set I of size n -|- 1 — dimC, there is a word of C whose support 
equals I. 

The following property is somewhat less standard. 

Lemma 2.2. Let C C be a eode. It is MDS if and only if any systematic generator matrix 
of C has all its rows of weight n + 1 — dimC. 

Proof. It is clear that if C is MDS the property must hold. The converse implication 
is an immediate consequence of the following claim: if C C F'^ is any code and x € C is a 
codeword of minimal weight, then there is a systematic generator matrix of C whose first 
row is X. 

We now prove this claim. Renumbering the coordinates, we may assume that suppx = 
{1, 2 -|- n — wt(x),..., n} and that 

x = (1,0,...,0,*,...,*), 

where the stars denote non-zero entries. Let {xi = x,X 2 , ■ ■ ■ ,Xk} be an T-basis of C con¬ 
taining X, where k := dimC, and let G be the generator matrix of C whose rows are the 
Xi’s. If G can be made systematic in the first 1 -|- n — wt(x) positions then we are done. 
Otherwise, we obtain a contradiction as follows. We have that wt(x) > 1 and the rank of 
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the matrix G restricted to its first 1 + n — wt(x) columns is < k. There exists therefore a 
linear combination 

k 

X — ^ ^ CXiXi^ 
i=2 

with 02 , ■ ■ ■ ,Oik € F, which has zeros in positions {2,..., 1 + n — wt(x)}, but with x 7 ^ 0. 
Now a suitable combination of x and x yields a non-zero word of weight smaller than wt(x), 
contradicting the minimality of wt(x). A 

Among MDS codes, Reed-Solomon codes, in the widest possible sense, will be prominent. 
A Reed-Solomon code of length n and dimension is a code of the form 

{(5i/(ai),---,5n/(an)) : / G F[X]^k}, 

where F[X]^k denotes the space of polynomials of degree less than k, gi,... ,gn are non¬ 
zero elements of F, and ai,... ,an are pairwise disjoint and belong to T U { 00 }, with the 
convention that for any / € F[X]^k, /(oo) equals the coefficient of X^~^ in /. We shall call 
(ai,... ,a„) an evaluation-point sequence for the Reed-Solomon code. 

This code family includes the codes called generalized, extended, and doubly-extended 
Reed-Solomon codes. From the geometric point of view, they may be thought of as the 
projective version of Reed-Solomon codes. In [7] they are named “Cauchy codes” and have 
also been called “Cauchy Reed-Solomon codes”. We shall simply refer to them as “Reed- 
Solomon codes”. 

Remark 2.3. If C and D are two Reed-Solomon codes with a common evaluation-point 
sequence a, then the product CD is also Reed-Solomon with evaluation-point sequence 
a and we have dim CD = min{n,dimC -|- dimD — I}. Theorem 12.51 below implies that 
min{n, dim C + dim D — 1} is the minimum possible dimension of the product of MDS codes. 

2.2 Code products 

For an arbitrary held K, the space is, with the coordinatewise product, a commutative 
unitary iF-algebra. Its unit element is the all-one vector, denoted by 1. The multiplicative 
group of its invertible elements is (K^)^ = meaning that x € K'^ is invertible if and 

only if all entries of x are non-zero. Given x € , its inverse is denoted by x~^. The 

following simple observation will be freely used later. 

Lemma 2.4. Let x € For any vector space V C K'^, we have dimR = dxmxV. 

The two results below relate the dimension of the product of two codes with the MDS 
property. The hrst one is taken from [151 §3.5]. 

Theorem 2.5. Let C,D (L F'^ he full-support codes. If (at least) one of them is MDS, then 

dim CD > min{n,dimC -|- dimD — I}. 

We also observe the following. 

Lemma 2.6. Let C,D C F^ be MDS codes such that 

dim CD = dim C -|- dim D — 1. 


Then CD is MDS. 
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Proof. By Lemma l2.ll it suffices to show that for any choice of / C { 1 ,... ,n} with 
|/| = d* := n + 1 — dim CD there exist x & C,y ^ D with suppxy = I. Without loss of 
generality, assume that I = {!,... ,d*}. As C and D are both MDS, there exist x £ C and 
y £ D such that suppx = / U {d* + 1,... ,dc} and suppy = / U {n — {do — d*) + 1,... ,n}, 
where dc and do denote the minimum distance of C and D respectively. One checks that 
dc = n — (di) — d*), hence indeed suppxy = suppx O suppy = I. A 

2.3 Stabilizer algebras and decomposable codes 

Lemma \2l] below classifies all subalgebras of K^. For all f = 1,..., n, let denote the f-th 
unit vector in K^. We call a vector of the form Yliei some I C {1,..., n} a projector. 
In particular, 1 is the projector with support {1,..., n}. A family of projectors is disjoint if 
the projectors have pairwise disjoint supports. 

Lemma 2.7. Any K-subalgebra of admits a K-basis of disjoint projectors. 

Proof. Let A C be a iF-subalgebra. We argue by induction on k := dim A. If A; = 1 
then A is generated by a vector x whose non-zero coordinates must be all equal, otherwise 
x'^ is not a iL-multiple of x. li k > 1, pick x £ A, x 0 oi minimal support with one of its 
coordinates equal to 1, and let {xi = x,..., Xk] be a iL-basis of A containing x. Then x is a 
projector, otherwise — x 7 ^ 0 would have smaller support. For alH = 2,..., A:, if suppx* 
and suppx intersect, say in position j, then we can choose \i £ K so that Xj -|- AjX has a 
zero in position j, hence x(xj -|- Ajx) has support strictly smaller than x. By minimality of 
supp X, x{xi -|- Ajx) = 0, i.e. x and Xj -|- AjX have disjoint support. Replacing if need be x* by 
Xj -|- AjX, we obtain that A is a direct sum A = (x) © (x 2 , • • •, x^) and the conclusion follows 
by applying the induction hypothesis to the second summand. A 

Remark 2.8. Lemma [2.71 implies in particular that the number of subalgebras of is finite. 
This fact will be useful later. 

Let V C be a AT-vector space. We define St(P) := {x E : xV © P}, the stabilizer 
of V in As V is linear, St(P) is a iF-algebra, hence Lemma 12.71 applies. In particular, 
St(P) has a basis of vectors whose entries are all O’s and I’s. This leads to the following 
lemma, that characterizes the stabilizer of a base-field extensior 0 - For a proof we refer to m 
Proposition 2.24]. 

Lemma 2.9. Let K' jK be a field extension. Let V C be a K-vector space. Then 

St(P © K') = St(P) © K'. 

Let C C be a code. As in the vector-space case, we can define its stabilizer and 
apply Lemma ITTI which yields an F-basis {vri,... ,7r/j} of St(C') of disjoint projectors, with 
h := dimSt(C'). When h = 1 we say that C has trivial stabilizer. We have the following 
lemma, whose proof is straightforward. 

Lemma 2.10. Any full-support code C C F'^ decomposes as 

C = TTiC © • • • © TThC 

where {vri,... ,TTh} is an F-basis of disjoint projectors of St(C). Moreover, each summand 
TTiC, viewed as a code in }ias trivial stabilizer and full support. 

K'/K is a field extension, the base-field extension V £) K', where the tensor product is taken over K, 
of V is the A"-span of V. 
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Facts on stabilizers, including Lemmas 12.91 and I2.1UI can be found in [151 from §2.6 
onwards]. Following [15], let us say that a code is indecomposable if it has trivial stabilizer. 

Lemma I2.1UI states in particular that a full-support code has non-trivial stabilizer if and 
only if it decomposes as a direct sum of codes, and the dimension of the stabilizer equals the 
number of indecomposable components. It follows that all MDS codes that are not equal to 
F” have trivial stabilizer. 

We conclude this section with two refinements of the classical Singleton Bound, involving 
the dimension of St(C) beside the usual parameters. They naturally reduce to the classical 
Singleton Bound when the code C is indecomposable, i.e. dimSt(C') = 1. 

Lemma 2.11. Let C C he a code. 

1. If dmm{C) > 1 then 


dmin(C') < n — dimC -|- 1 — (dimSt(C') — 1). 


2. If C has full support then 


dminiC) < 


n — dim C 
dim St(C') 


+ 1 . 


Proof. We may assume that C has full support, as the first claim in the general 
case follows immediately from the first claim in the full-support case. Set k := dimC, d := 
dmin(C') and h := dimSt(C'). By Lemma [2.10l we have that C is a direct sum C = Ci©- • -©C/i 
of full-support codes. For all f = l,...,/i, let and di denote the support size, the 

dimension and the minimum distance of Ci respectively. We have Yli=i ~ Yli=i ki = k 
and 

d = min{dj} < min{nj — ki\ + 1 
i i 

by the classical Singleton Bound. In the case d > 1 we have n* — fcj > d* — 1 > 1 for all 
i = 1,..., h, hence, for all j = 1,..., h, 

Uj — kj = n — k — — ki) < n — k — {h — 1). 

Putting everything together we have 


d = min{dj} < min{ni — ki} + l<n — k + 1 — {h — 1), 
i i 

which proves the first claim. To prove the second claim, note that 

h 

n — k = y (ni — ki) > /imin{nj — ki}, 

^^ i 

i=l 

hence minj{nj — ki} < (n — k)/h and the conclusion follows. A 

2.4 Main Theorem 

Our main result takes the following form. 

Theorem 2.12. Let C,D C F'^ be codes such that the pair {C,D) is Product MDS. Then 
one of the following situations occurs. 
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(i) C and D are MDS and, if none of them has dimension 1, they are Reed-Solomon codes 
with a common evaluation-point sequence. 

(a) There is a partition of the coordinate set into non-empty subsets 

{1,... ,n} = /i U • • • U4 

and there exist h pairs {Ci,Di),... ,{Ch,Dh) of codes of F^, such that suppCj = 
suppL)i = li, for all i = 1,... ,h, and such that C and D decompose as: 

C = Ci®---®Ch, 

D = Di®---®Dh. 

Furthermore, for all i = l,...,h, when Ci and Di are identified with codes o/ 
through the natural projection on their support, we have that Ci = {giDi)^ for some 

g, € (Fl^»l)x. 

Remark 2.13. The codes Ci and Di are mutually orthogonal relative to the non-degenerate 
bilinear form (x, ?/) i-A (x | giy) = {giX \ y), where (• | •) denotes the standard inner product. 
Hence the wording of Theorem 11.21 in the case C = D. 

3 Kneser’s Theorem 

Kneser’s Addition Theorem below involves the stabilizer St(Ai) = {g G C : g X = X} of a 
subset X of an abelian group C. The (Minkowski) sum A B oi two subsets A,B of C is 

defined as the set of sums a-\- b when a and b range over A and B respectively. 

Theorem 3.1 (Kneser |10]1. Let C be an abelian group. Let A,BCC be non-empty, finite 
subsets. Then 

\A + B\> |A| + |R|-|St(A + R)|. 

Kneser’s original Theorem was transposed to the extension field setting by Hou, Leung 
and Xiang in [8]. Let L/K be a field extension. For AT-linear subspaces S,T <Z L, we may 
consider the product of subspaces ST defined as the iF-linear span of the set of elements of 
the form st,s £ S,t ^ T. Hou et al.’s Theorem is concerned with the structure of pairs of 
subspaces whose product has small dimension. Again, the stabilizer of a iF-subspace X C L 
is involved and is defined in the expected way St(X) = {z £ L : zX C X}. 

Theorem 3.2 (Generalized Kneser Theorem [8]). Let LfK be a separable field extension. 

Let S,T C L be non-zero, finite-dimensional K-vector spaces. Then 

dim S'T > dim S' -|- dimT — dimSt(ST). 

Remarkably, Kneser’s original Theorem for groups can be recovered easily from Hou et 
al.’s version. 

We will now proceed to show that there is a variant of Kneser’s Theorem for the algebra 
induced by coordinatewise multiplication. 

Theorem 3.3. Let S,T <£ K"" be non-zero K-vector spaces. Then 

dim ST > dim S -|- dim T — dim St (ST). 

Remark 3.4. The products ST in Theorems 13.21 and 13.31 are in different algebras. The 
statement of Theorem E2] is the only instance of the paper where the product ST does not 
refer to a coordinatewise product. 
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Remark 3.5. Assuming that Theorem 13.31 holds in the case of full-support S and T, the 
general case can be derived as follows. Let So,Tq C be the projections of S,T respec¬ 
tively on supp5T, where no := |snpp5r|. The spaces Sq and Tq both have full support, 
hence 

dim^oTo > dim So -|- dimTo — dimSt(Soro). 

Clearly dimSoTo = dim ST and dimSt(ST) = dimSt(Soro) + n — no- It remains to prove 
that 

dim So -|- dim To > dim S -|- dim T — {n — tiq). 

Let Si,Ti C bg ^]^g projections of S, T respectively on the complement of suppST. 

Observe that suppSi and suppTi cannot intersect, hence dim Si-|-dimTi < n—riQ. Moreover 
dimS < dim So-|-dim Si and dimT < dimTo-|-dimTi. Putting everything together we obtain 
the desired inequality. 

From here on “Kneser’s Theorem” will refer to Theorem 13.31 rather than to the original 
result. Our proof is strongly inspired by Hou et al.’s proof of Theorem 13.21 [8]. itself drawing 
upon the e-transform technique of additive combinatorics (see e.g. m)- 

If P is a iF-subspace of AT”, we use the notation to mean the subset of invertible 
elements of V. 

Lemma 3.6. Let S, T C be non-zero K-veetor spaces. Assume that T has a basis of 
invertible elements. Then, for all x G , there exist a K-algebra C and a K-veetor 
space Vx C AT” such that HxVx = Vx, xT C Vj, C ST and 

dim Vx -I- dim Hx > dim S -|- dim T. 

Proof. Assume that the lemma is proved for x = 1 . Then, if S^ is non-empty, for any 
X G we may apply the result for the case x = 1 to x“^S and T. So we only need to prove 
the Lemma for 1 € S and x = 1 . Analogously, we may assume that 1 € T. 

We argue by induction on k := dimS. k = 1, H := K1 and P := T do the job. So 
assume that k > 1 and the result holds for smaller dimension. For each e G T^, define 

S(e):=SnTe-\ T(e):=T + Se. 

We have S{e)T C ST, S(e)Se C TS, therefore S(e)T(e) C ST. Furthermore, 

dimT(e) = dimT -|- dimSe — dim(T n Se) 

= dim T -|- dim S — dim(TC S) 


by Lemma 12.41 hence 

dimS(e) -|- dimT(e) = dimS -|- dimT. 

We distinguish two cases. 

Assume that S(e) = S for all e G T^, i.e. S C Te“^ for all e G T^. Then, since T has a 
basis of invertible elements, we have ST C T. The result then holds with H the subalgebra 
generated by S and P := T. 

Assume that there exists e G T^ such that S(e) P S. Then 0 < dimS(e) < k hence the 
induction hypothesis applied to S(e) and T(e) gives an algebra H and a vector space P such 
that HV = V, 

T C T(e) CPC S{e)T{e) C ST 

and 

dim P -I- dim H > dim S(e) -|- dim T(e) = dim S -|- dim T. 
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Proof of Theorem 13.31 By Remark 13.51 we may assume that both S and T have 
full support. The key to the proof is the following observation. Assume that T has a basis 
of invertible elements. Recall that, by Lemma 13.61 for all x € 5^ there exist a iL-algebra 
Hx C and a iL-vector space 14 ^ T” such that 

HxVx = Vx ( 2 ) 

xT C C ST (3) 

dim Vx + dim Hx > dim S + dim T. (4) 

Set k := dim 5 and assume furthermore that there exists a iL-basis {xi,... ,Xk} of S con¬ 
tained in 5^ such that 

Hx,=---= Hx, =: H. (5) 

Then ST = 14^ -!-••• + Vx, by ([3]) , and therefore HST = ST by ([2]) , in other words 
H C St{ST). From Q it follows therefore that 

dim ST + dim St{ST) > dim 14^ -|- dim H > dim S + dim T, 
hence the conclusion. 

We shall first prove the Theorem when K is an infinite field, by showing in that case that 
T always has a basis of invertible elements and that there always exists a basis {xi,..., x„} 
of invertible elements of S satisfying ([^. 

Since T has full support, it should be clear enough that it has a basis of invertible elements 
for K infinite. In this case Lemma 13.61 applies. Now fix a iL-basis {si,...,Sfc} of S and 
define, for all a ^ K, ya '■= Yli=i ^ choice of non-zero, pairwise distinct 

ai, ..., afc € K, the matrix transforming si, ..., Sfc into ■ ■ ■ ■, Va, is Vandermonde, and 
therefore j ■ ■ ■ > Ua, is also a AT-basis of S. We now observe that the set {a G K : y^ € S^} 
is infinite: indeed its complement in K is finite, as it is a finite union of zero-sets of non¬ 
zero polynomials. That these polynomials are non-zero is guaranteed by the full-support 
property of S. On the other hand, the number of subalgebras of AT"' is finite by R emark 1 2. 81 
in particular the number of subalgebras Hx guaranteed by Lemma [3.6l is finite. It follows that 
there exist ai,...,such that {xi = ya,, ■ ■ ■ ,Xk = Ua,} is a AT-basis of S whose elements 
are all invertible and such that Hx^ = ■ ■ ■ = Hx, ■ This concludes the proof in the case K 
infinite. 

Assume now that K is finite, and consider an infinite field extension K' of K, for example 
the rational function field K' := K{t), where t is transcendental over K. The infinite base- 
field case applies to AT'-vector spaces. Our purpose is to draw our conclusion from this. 
Define the base-field extensions S' := S ®K',T' := T ®K', where tensor products are taken 
over AT. By construction S' and T' are AT'-vector spaces and we have just proved that 

dim^^' S'T' > dim^^' S' + divnK' T' — dim^^/ Si{S'T'). 

It is clear that S'T' = ST (g) AT', dim/^/ S' = dim S', daiaK' T' = dimT and d\m.K' S'T' = 
dim ST, where non-indexed dimensions are taken over AT. Moreover St(S'T') = St(ST) (g) A'' 
by Lemma 12.91 and the conclusion follows. A 

Theorem 13.31 implies in particular that if C and D are two codes such that CD has trivial 
stabilizer, i.e. is indecomposable, then we must have 

dim CD > dim C + dim D — 1. (6) 

The next section studies pairs of codes C, D such that CD is indecomposable and achieves 
equality in ([6]). 
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4 Vosper’s Theorem 

We start by recalling Vosper’s Addition Theorem. 

Theorem 4.1 (Vosper [IT]). Let G he an abelian group of prime order p. Let A, B C G be 
subsets, with |yl|, \B\ > 2 and \A + B\ < p — 2. If 

\A + B\ = |A| + \B\-1 

then A and B are arithmetic progressions with the same difference. 

We point out that an extension-field version of Vosper’s Theorem for finite fields was 
recently proved in [T]. 

Since the stabilizer of a subset of a group G must be a subgroup, when G is of prime 
order and has no proper subgroup, Kneser’s Addition Theorem 13.II implies that subsets A, B 
of G such that A + B G must satisfy 

\A + B\> |A| + \B\ - 1. 

This result is known as the Cauchy-Davenport Inequality, see [121116j . Vosper’s Theorem 
is therefore concerned with characterizing pairs of sets achieving equality in the Cauchy- 
Davenport Inequality. 

In the algebra setting, the inequality Q may be thought of as a code-product version of 
the Cauchy-Davenport Inequality. But contrary to the group case, the algebra F” always 
has proper subalgebras (for n > 1 ) so we cannot hope to ensure Q purely by a condition 
on However, we have seen that ([B]) holds when (at least one of) the codes involved is 
MDS (Theorem [23|) . The following theorem may be seen as a version of Vosper’s Theorem 
for MDS codes, and is the main result of this section. 

Theorem 4.2. Let G,D C be MDS codes, with dim C, dim D > 2 and dim CD < n — 2. 

If 

dim GD = dim G + dim D — 1 

then G and D are Reed-Solomon codes with a common evaluation-point sequence. 

Remark 4.3. The hypotheses dim G, dim D >2 clearly cannot be removed. The value n — 2 
is also best possible in the hypothesis dim CD < re — 2 , since by taking C to be an arbitrary 
MDS (non Reed-Solomon) code, and taking D = C-*-, we will have a pair of MDS codes such 
that dim CD = dimC -|- dimD — I = re — I. 

We introduce the following notation for Vandermonde-type matrices. Given a positive 
integer k and a = (ai,..., «„) € (D U {oo})"' we denote by 14(a) the k x n matrix whose 
reth column is (I, at,..., a^“^)^ if a^ 7 ^ oo, (0,..., 0,1)^ otherwise. Note that the possible 
presence of this last column makes 14(a) a Vandermonde matrix in a generalized sense. We 
remark that if the entries of a are pairwise distinct then Vk{a) has full rank. With this 
notation, a Reed-Solomon code of length re and dimension k is a code of the form gG, where 
g G (D^)” (i.e. g has no zero entries) and C is generated by I4(«) for some a G (F U {oo})*^ 
with pairwise-distinct entries. The vector a is an evaluation-point sequence of C (see the 
end of Section EH). 

Lemma 4.4. Let G C F** he a full-support code with dimC > 2 and dmin(C') > I. Assume 
that there exists a 2-dimensional MDS code A C F”, generated by V 2 {a) for some a G F” 
with pairwise distinct entries, such that 

dim AC = d im C -|- I < re — I. 

Then G is generated by q Vwm nia) for some g € G. 
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Proof. Since a has at most one zero coordinate, dmin(C') > 1 implies that dimaC = 
dimC. We therefore have 

dim^C = dim(C + aC) = 2dimC — dim(C' n aC), 


hence 

dim(C' n aC) = dim C — 1. 

Moreover, C' = C H aC has support strictly larger than its dimension, otherwise it would 
have minimum distance 1 and this would imply the existence of a word of weight 1 in C. We 
prove the lemma by induction on k := dimC. 

In the case k = 2, pick g' £ C (1 aC, which exists as dim(C' fl aC) = 1, and let s' G C be 
such that g' = ga. Then g and g' = ga are linearly independent, as | suppsj > | supp g'\ > 2 
and a has pairwise distinct entries. It follows that C is generated by g and ga, i.e. by gV 2 {a). 

Now assume that k > 2. We have 

k = dimC' + 1 < diva AC' < dimaC = k, 

where the right inequality follows from the inclusion AC' = C + aC C aC, and the left 
inequality follows from Theorem 12.51 (recall that A is MDS). Strictly speaking, Theorem 12.51 
only applies to full-support codes and C may have a support of cardinality n — 1 if a has a 
zero coordinate. But if this happens we may puncture A and C by deleting this coordinate 
to obtain full-support codes of the same dimension as A and C and still apply Theorem 12.51 

Since C' C C we have (imin(C") > dmin(C') > 1, and we have just shown dimMC" = 
dimC" -|- 1 < (n — 1) — 1, since dimC" = dimC — 1. Therefore the induction hypothesis 
applies to C, possibly after puncturing one zero coordinate to make C full support. Hence 
C is generated by g'Vk-i{a) for some g' £ C . Let g £ C he such that g' = ga. The matrix 
whose rows are the elements of the set {g,g' = ga,... ,g'a^~‘^ = ga^~^} C C is gVk{a), 
which has rank k as | supp s’! > | suppC"| >k.li follows that this set is linearly independent 
and gVk{a) generates C. A 

Lemma 4.5. Let C,D C he MDS codes satisfying 

dim CD = dim C -|- dim D — 1. 

Assume that there exists an index set I C {!,..., n} with |/| > dim CL) such that the 
punctured codes Ci,Dj C obtained by projecting C and D on the eoordinates indexed 

by I are Reed-Solomon codes with a common evaluation-point sequenee. Then C and D are 
Reed-Solomon codes with a common evaluation-point sequence. 

Proof. Set k := dimC, I := dimL). Since |/| > dim CD we have |/| > k and |/| > i 
and since C and D are MDS we must have dimC/ = dimC = k, dimD/ = dimD = £. Note 
that we may suppose k,i>2 , otherwise there is nothing to prove. 

Reformulating the hypothesis, there exist gi,g'i £ aj £ {F L) {oo})l^l, where aj 

has pairwise-distinct entries, such that Cj and Dj are generated by giVk{ai) and g'jVi{ai) 
respectively. In other words there are unique generator matrices Gc and Gd oi C and 
D whose /-indexed columns form giVk{aj) and g'jVi{aj) respectively. It also follows that 
5/<7/kfc+£-!(«/) generates CjDj (as k-\-l—l < |/|), dimC/D/ = k-\-i—l = dim CD and there 
is a unique generator matrix Gcd of CD whose /-indexed columns form gjg'jVk+i-i{aj). 

Let xq, ... Xk-i and yo,..., yi-i denote the rows of Gc and Go respectively. 

The key observation is the following: let u, u, s, t be integers, h <u,s <k — l h <v,t < 
/ — 1, such that 

u -\- V = s -\-1. 
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Since XuUv and Xgi/t coincide in the /-indexed coordinates, and dimCiDj = dim CD, the 
vectors XuUv and XsVt must coincide in every coordinate of n}. In other words, 

if TT = (vTo, vTi, ..., 7rfc_i)^ and p = {po, pi ■ ■ ■, pe-i)"^ are the j-th column of Gc and Gd 
respectively, for some j 0 I, then 

'^uPv - '^sPt- 

We now exploit this property in order to prove the lemma. Pick two columns vr, p of 
Gc,Gd as above. 

First assume that tto 7^ 0 and po ^ 0. Without loss of generality we may assume 
"^0 = Po = 1- It follows from vropi = vripo that pi = vri =: /3 G F. For all i < /c — 1, it 
holds that vr^ = vrjpo = T^i-iPi- Applying this formula recursively we obtain vTj = /3* for all 
i < k — 1, i.e. TT corresponds to the evaluation point j3 G F. The same argument applies to 
p, which corresponds to the evaluation point G F as well. 

Now assume that tto = 0. If po 7^ 0, then vripo = "^oPi = 0 implies tti = 0. Continuing in 
this way, we see that if = 0, then TTi+ipo = '^iPi = 0 implies vTj+i = 0 and by induction 
we obtain tt = 0 which contradicts the full-support property of the MDS code C. Therefore 
Po = 0. Assume without loss of generality that k < £. 11 k = i = 2, then both tti and pi 
are non zero as C and D have full support, hence the columns tt and p correspond to the 
evaluation point 00. li k = 2 and i > 3 then as piTii = pj+ivro = 0 for all i < / — 1 and as 
TTi 7^ 0 it follows that p* = 0 for alH < / — 1 and again the full-support property of D implies 
that the column p corresponds to the evaluation point 00. If fc > 2, then the same procedure 
that we applied to ttq, po again yields tti = pi = 0. Iterating in this way, we obtain that both 
TT and p correspond to the evaluation point 00. 

We have proved that up to multiplication by vectors g,g', the codes G and D have 
generator matrices of the form Vk{a) and Vi{a). Since G and D are MDS, the evaluation- 
sequence a must have distinct entries and C and D are Reed-Solomon codes with the same 


evaluation-point sequence. A 

Proof of Theorem 14.21 Set k := dimC, i := dimD, k* := dim CD = k + £-1. Let 
Go, Do T D"-o be the punctured codes obtained by projecting C, D on the first no := k* + 2 
coordinates. As Go, Do and CqDo are MDS, we have dimCo = dimC, dimDo = dimD, 
dim Co Do = dim CD and 

k* = dim CoDq = dim Cq -|- dim Do — 1 = no — 2. (7) 


Define the code A C F'^° by 

71 := (CoDo)^. 

By Lemma f2.6l the code GqDq is MDS, therefore A is MDS and furthermore has dimension 2 
by dZD. Now observe that for any a G A, x G Go, y G Dq, orthogonality of A and CoDo 
translates into 

(a I xy) = 0 


which is equivalent to 


{ax I y) = 0. 


We have therefore {AGq)^ A Do, from which we deduce 


dim ^Co < no — dim Dq = dim Cq -|- 1 < no — 1 


whence 

dim AGq = dim Cq -|- 1 ( 8) 

by Theorem 12.51 Similarly we also have 

dim^Do = dimDo-I-1. (9) 
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Now A is an MDS code of dimension 2 and therefore has a generator matrix with at 
most two zero entries. By puncturing one coordinate if need be, we obtain a generator 
matrix with at most one zero entry. The two rows of this matrix are clearly of the form 
g, ga for some g € and a G F'^ with pairwise distinct coordinates. Finally, consider that 
dim Co = no — 1 — dim Cq < no — 3, and similarly dim Dq < uq — 3. Hence ([8|) and ([9]) imply 

dim^dCo < no — 2, 

dim^Co < no — 2. 

Therefore Lemma im applies to A, Cq and to A, Dq, possibly after puncturing one coordinate. 
From there we obtain that Cq and Dq (possibly punctured on a common coordinate) are 
Reed-Solomon codes with a common evaluation-point sequence, and Lemma 14.51 gives the 
desired conclusion. A 

An interesting consequence of Theorem 14.21 is the following characterization of Reed- 
Solomon codes among MDS codes. Applying Theorem 14.21 in the case C = D yields: 

Corollary 4.6. Let C C F’^ be an MDS code, with dimC < (n — l)/2. The code C is 
Reed-Solomon if and only if 

dimC^ = 2dimC — 1. (10) 

Remark 4.7. If dimC > {n l)/2, then C being MDS we must have C^ = F"‘ and the 
dimension of the square cannot yield any information on the structure of C. However in 
that case, whether C is Reed-Solomon is betrayed by the dimension of the square of the 
dual code C-*-. The remaining case in which Corollary 14.61 does not say anything is the case 
dimC = n/2. One may wonder whether it still holds that C is Reed-Solomon if and only 
if dimC^ = 2dimC — 1, and possibly Theorem 14.21 and Corollary 14.61 have not managed to 
capture this fact. 

The answer to this question is negative, indeed there exist plenty of MDS codes of di¬ 
mension n/2 satisfying (|10p which are not Reed-Solomon. For instance, the codes denoted 
(^11,8,8 and Ci 3,8,21 in m, of length 8 over the fields with 11 and 13 elements respectively are 
self-dual, therefore satisfy m, and can be shown not to be Reed-Solomon. 

5 Classification of PMDS pairs 

We now are finally ready to focus on the paper’s central result, namely Theorem 12.121 

First, we show how Randriambololona’s Product Singleton Bound can be obtained as a 
consequence of Theorem 13.31 To be precise we obtain: 

Theorem 5.1. Let Ci,... ,Ct C F^ be codes. Assume that their product Ci - ■ ■ Ct has full 
support. Then 


^111111(^1 • • • Ct) < max{t — 1, n — (dimCi dim Ct) t}. 

Remark 5.2. The full result of m is actually stronger than Theorem 15.11 as it ensures that 
an element of weight at most max{t — 1, n — (dim Ci dim Ct) -|- 1} can be found in the 

set 

{xi - ■ ■ xt : xi £ Cl,... ,xt € Ct}, 

and not only in its span. The support condition given here is also not the same as the 
apparently weaker hypothesis given in m, but the two conditions are really interchangeable, 
as argued in m Remark 3(c)]. 
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Proof of Theorem 15.1L For ease of notation, set ki := dimCj for all i = 1,... 

P := k* := dimP, d* := dmm{P)- Assnme that d* > t. The classical Singleton 

Bound, applied to P, says that 

k*<n-d* + l. (11) 

Repeatedly applying Kneser’s Theorem 13.31 we obtain 

k* > ki + ■■■ + kt — {t — 1) dim St(P). (12) 

Combining it with (|lll) . we get 

d* < n — {ki + ■■■ + kt) + I + {t — 1) dim St(P), (13) 

which is apparently a weaker statement than Theorem 15. 11 To improve it, we “correct” m 
to transform it into an identity, namely we define m := n — d* + 1 — k*. Thus, by definition, 
P is “m-far from being MDS”. The combination of this identity with ()12p gives an improved 
version of ()13p . namely 

d* = n — k* + 1 — m < n — {ki + ■■■ + kt) + I + (t — 1) dim St(P) — m. (14) 
In the case of t = 2, the first claim of Lemma 12.111 rewritten as 

dim St(P) — (n — d* + 1 — A:*) < 1 

immediately proves the theorem. In the general case, using the second claim of Lemma l2.Ill 
instead we obtain 

{t — 1) dim St(P) — m < {t — 1) — - m 

= t — 

As d* > t the conclusion follows. 

Prom here on we focus on the case of t = 2. 
defined to be PMDS if 




d* - i 


d* -t 

I-;- m. 

d* - I 


(15) 


A 

Recall that a pair of codes C, D C P" is 


2 < daim{CD) = n — dimC — dimP + 2. 

Observe that for a PMDS pair (C, D) all inequalities in the proof of Theorem 15.11 are actually 
identities. From this simple observation we obtain some corollaries which relate the Product 
Singleton Bound with Kneser’s Theorem and with the classical Singleton Bound. 

Corollary 5.3. Let C,D C P” be codes such that the pair (C, D) is PMDS. Then the 
following hold. 

1. The pair {C,D) attains the bound of Kneser’s Theorem, i.e. 

dim CP = dimC + dimP — dimSt(CP). 

2. Either CD is MDS or dmin{CD) = 2. 
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Proof. From the above observation, (1121) is an identity if {C,D) is PMDS, hence the 
first claim is immediately proved. From (1141) and (jl5p we obtain 

dminiCD) - 2 _ 

dminiCD) - 1 ’ 

where m := n — d^nmiCD) + 1 — dimCH, hence either m = 0 meaning CD is MDS, or 
dn^iniCD) = 2. A 

The two possible cases in our main Theorem 12.121 arise from the two possible situations 
given by the second claim of the above corollary. We distinguish the case of dmin (CD) > 2, 
which implies that CD is MDS, and d^^^{CD) = 2. 

Proposition 5.4. Let C,D C be codes such that the pair {C, D) is PMDS, and assume 
dmin{CD) > 2. Then C,D and CD are MDS. Moreover, i/dimC, dimD > 2 then C,D and 
CD are Reed-Solomon codes with a common evaluation-point sequence. 

Proof. By the above corollary CD is MDS. Moreover the PMDS property immediately 
yields n > dimC + dimD. We now proceed to prove that C and D are also MDS through 
Lemma ESI 

Set k := dimC, ^ := dimD. Without loss of generality, we can choose a generator matrix 
Cc of C that is systematic in the hrst k positions. Let Gd be a generator matrix of D. The 
matrix formed by the last n — k columns oi Go has full rank, otherwise there is a non-zero 
vector of D that is zero in the last n — k positions, and taking the product with a row of 
Gc we would obtain a vector of CD of weight 1, contradicting that CD is MDS and not the 
whole space T”. So we can now assume that Gc is systematic in the first k positions and 
Gd is systematic in the subsequent I positions. 

Now we focus on Gc. Assume that there is a zero entry in the j-th column of Gc for 
some j > k I, say in position {i,j) of Gc. Then, since the j-th column of Gd is not 
all-zero (otherwise CD would not be full support and would not be MDS), the product of 
the i-th row of Gc with some row of Gd yields non-zero vector of CD of weight at most 
n — k — £ 1 = dmin(GD) — 1, a contradiction. Therefore, all columns of Gc indexed by 

j > k -\- £, that exist since n > k -\- i, have no zero entries. For the same reason, this is 
also true of Gd, and we obtain that the product of any row of Gc with any row of Gd is 
non-zero. 

From this last fact, we get that Gc cannot have zero entries in the columns indexed by 
{k -\- 1, ... ,k -\- £}, or again, by taking a product of a row of Gc with a row of Gd, we would 
have a non-zero vector of CD of weight at most n — k — £ -\-1. Now Lemma l2 .2 1 allows us to 
conclude that G is MDS. Analogously, one has that D is MDS as well. 

The last statement now follows immediately by Theorem 14.21 Note that n > dim G -|- 
dimD is equivalent to the hypothesis dimGD < n — 2. A 

The following lemma will be useful to deal with the second case. 

Lemma 5.5. Let C,D C be codes such that CD is MDS and 

dim GD = dim G -|- dim D — 1 = n — 1. 

Then there exists g G such that C = {gD)-^. 

Proof. Let g € F"" be a generator of (GD)-*-, which is invertible as (GD)-*- is MDS of 
dimension 1. For any x G G, y G D, we have 

{x I gy) = {xy\g) = 0 

so that G C (yD)-*-, and equality follows by comparing dimensions. A 
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Proposition 5.6. Let C,D C P” be codes such that the pair {C,D) is PMDS. Set h := 
dim St{CD) and let {vri,..., vr/i} be an F-basis ofSt{CD) of disjoint projectors with supports 
Ii,... ,Ih. Then C, D and CD decompose as 

C = TTiC 0 • • • © TThC, 

D = TTiD 0 • • • 0 TThD, 

CD = t^iCD 0 • • • © TThCD 


and, for all i = 1,... ,h, we have supp71^(7 = suppvTjL) = suppTrjCii) = Ii and 

dimT^iCD = dimTTjC © dimTTjZ? — 1. (16) 

Moreover, if d m\„ {CD) = 2 then, for all i = 1, ... ,h, when ttiC and iTiD are identified with 
codes through the natural projection on their support, then tTiC = (giTTiD)-^ for some 

Qi G 

Proof. By Kneser’s Theorem we have, for alH = 1,..., h, 

dim-KiCD > dimTTjC' © dimTTjZ? — 1 (17) 


since TijCD has trivial stabilizer. Therefore 


dime'll = dim-KiCD > (dim71^(7 © dimTijll — 1). 


2 = 1 


2 = 1 


Observing that 
we get 


(7 C TTiC^ 


TThC, D C TTiD 


'T^hD 


(18) 

(19) 


^^(dim7rj(7 © dimTTjZl — 1) > dimC © dimH — h, 


2=1 


but the right hand side of this inequality equals dim CD by the first claim of Corollary 15.3[ 
From (lisp we obtain therefore that all inequalities in (1171) are equalities, i.e. for all i = 


1 , 




dimTiiCD = dirnTTiC © dimTTjll — 1, 


and we obtain also 


(dimTTiC © dimiTiD) = dim(7 © dimH, 

2=1 

hence both inclusions in (fTop are actually identities. 

Now assume that dmin{CD) = 2. Observe that n = dim(7 © dimH by the Product 
Singleton Bound. From here on all codes are identihed with full-support codes through the 
natural projection on their support. For all 7 = 1,..., h, we have dmin(711(711) > 2, hence 
|7j| > diva-TTiCD © 1 by the classical Singleton Bound applied to TiiCD. Therefore 


h h 

n = |/j| > y^(dim7rj(7Zl © 1) 

2 = 1 2 = 1 

h 

= y^(dim7rj(7 © dimTTjZl) 
2 = 1 

= dim (7 © dim D = n. 
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It follows that 


dimTTiC'D = dimTTjC' + dimyriZ) — 1 = |/j| — 1 

and dmini'^iCD) > 2 = |Ij| — dimvrjC'ZI + 1 proves that niCD is MDS. Now the conclusion 
follows by Lemma 15.51 A 

Propositions 15.41 and 15.61 constitute the proof of Theorem 12.121 


6 Concluding comments 

As mentioned in Section 01 Theorem 14.21 is arguably a coding-theoretic analogue of Vesper’s 
Addition Theorem. The analogy with its additive counterpart is not as clear-cut however 
as in the case of Theorem 1,4.31 and Kneser’s Addition Theorem. More precisely, the MDS 
hypothesis in Theorem 14.21 is not a very natural analogue of the prime order of the ambient 
group hypothesis in Vosper’s original Theorem, and there may possibly be other coding- 
theoretic analogues to consider. 

The natural question raised by Theorem 13.31 and Theorem 14.21 is whether there exists a 
satisfying characterization of pairs C, D such that CD is indecomposable and of codimension 
at least 2, and dim CD = dimC -|- dimD — 1. Beside pairs of Reed-Solomon codes, one now 
has Reed-Solomon codes with duplicate coordinates. Beside these, other examples turn up. 
In particular, one may take the amalgamated direct sum [5] of self-dual codes. 

If the analogy with additive combinatorics is to be trusted, such a characterization may 
be tractable - though probably difficult - and would be a coding-theory equivalent of Kem- 
perman’s Structure Theorem for small sumsets [9]. 

Finally, it is natural to wonder whether the characterization of PMDS pairs extends to 
products of more than two codes. Our techniques (Corollary 15.31 and Proposition 15.41) allow 
to deal with the analogue of the first case of Theorem 12.121 and to prove the following: if 
(Cl, . .. ,Ct) is a t-PMDS tuple, i.e. satisfies 

dmin(C'i ■ ■ ■ Ct) = n — (dim Cl H-h dimCt) -|- f, 

if none of the Cj’s has dimension I and 

^^min(C*i • • • Ct) > t, 

then all Cy’s are Reed-Solomon codes with a common evaluation-point sequence. On the 
other hand the arguments in the paper do not seem quite sufficient to deal with the case of 


dmm{Cl • • • Ct) — t 

corresponding to the second case of our main theorem. We leave the matter open for further 
study. 

While this paper was in review, a version of Kneser’s Theorem for a family of algebras was 
independently posted by Beck and Lecouvey [2], and is a more general version of Theorem l3.31 
The proof follows similar arguments. Moreover, [21 Section 4.3] shows how Kneser’s original 
Theorem can be recovered from the new variant. The very same argument, which is based on 
the embedding of the group C into the complex group algebra C[G] and on the isomorphism 
C[G] = allows one to recover the original theorem from our variant as well. 
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